Outt
Sett
Behavioral task
behavioral1
Sample
a8a91f8e55726602d14cc1571f52c36a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a8a91f8e55726602d14cc1571f52c36a_JaffaCakes118
Size
72KB
MD5
a8a91f8e55726602d14cc1571f52c36a
SHA1
3823a2022d484de64c6181fb8f74a1014abf5ead
SHA256
95d899653821da10f6140e02a965f9b3344aa56dd3bc5f9b5fb3bf89e36e87bc
SHA512
c39b8cd4aad8eeb41ae3aba9e0126a8b4ad0065a865605692286db933ad85b1c37a5c4e061382229d912721082a75b067c8c17ac2ea9c11649b28c81a1314d8c
SSDEEP
1536:evv+RzN2o3a+fQXh5fCvVr5qvLBn/Ou+QKx3ZT:6+RzcoPoGtrELVGzQKxZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8a91f8e55726602d14cc1571f52c36a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ